[
https://issues.apache.org/jira/browse/MNG-6414?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16616717#comment-16616717
]
Sylwester Lachiewicz commented on MNG-6414:
-------------------------------------------
Good idea, we can try to find the solution while working on MNG-6358. Now a
manual check in the distribution lib folder and in the LICENSE file.
And thanks to that notice, I discovered a few leaked artifacts with Guava.
> Add more Apache license header patterns to skip downloading Apache license
> --------------------------------------------------------------------------
>
> Key: MNG-6414
> URL: https://issues.apache.org/jira/browse/MNG-6414
> Project: Maven
> Issue Type: Improvement
> Affects Versions: 3.2.1, 3.3.9, 3.5.4
> Reporter: Sylwester Lachiewicz
> Assignee: Sylwester Lachiewicz
> Priority: Minor
> Fix For: 3.6.0
>
>
> While preparing Maven distribution, maven-remote-resources-plugin try to
> download licenses for all dependencies that are not Apache licensed (see
> resulting {{lib/*.license}} in Maven binary distribution, since Maven 3.2.1
> MNG-5494).
> License file is not downloaded only when project/license/name is strictly
> equal to "The Apache Software License, Version 2.0": this is too restrictive,
> as we see Apache license downloaded many times from https://www.apache.org/
> (causing some issues with https: MNG-6358).
> After debugging these cases, additional patterns for Apache license exist and
> need to be added to exception list in
> {{appended-resources/META-INF/LICENSE.vm}}:
> - "Apache License, Version 2.0"
> - "The Apache Software License, Version 2.0"
> - "ASLv2"
> - "Apache Public License 2.0"
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
